Post
Topic
Board Development & Technical Discussion
Re: Why so many p-values were skipped in case of secp160k1?
by
gmaxwell
on 05/02/2025, 04:13:51 UTC
The field and curve have to admit a primitive root of unity in order to make the efficient endomorphism work, so that's going to be part of the selection criteria for any of the K curves.


primitive root ?


Quote
Now I understand. It is slightly more complicated than that.
Private keys are not multiple of 18051648. Private keys are power of z mod q, where z is a primitive root mod q.



source

https://github.com/cysecud/ecc_weak_keys/issues/2#issuecomment-2508282587


primitive root generate vulnerable subgroups what provide way to breack 256 bit key in seconds.On github more info about it.



You're spouting nonsense, stop linking to fake 'weak key' bullshit.  These are posts of scammers tricking people into running malware.

Secp256k1 is prime ordered, there are no subgroups and all keys are equivalent.